Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/01340135-323a-36aa-b2a6-c043c7b6b46d.roa
File:                     01340135-323a-36aa-b2a6-c043c7b6b46d.roa (raw, json)
Hash identifier:          fkn9+dJGMGLZp+esFIop2L6p0Nph68epr8aCB12H/Bs=
Subject key identifier:   48:ED:DF:A7:10:65:8F:98:33:3A:0E:56:E9:DC:BA:0C:E8:3D:52:1F
Certificate issuer:       /CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
Certificate serial:       010D0C9F4328584E419F6FB1150119C72335E880
Authority key identifier: 4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/01340135-323a-36aa-b2a6-c043c7b6b46d.roa
Signing time:             Mon 22 Jun 2026 12:57:18 +0000
ROA not before:           Mon 22 Jun 2026 12:57:18 +0000
ROA not after:            Sun 20 Sep 2026 12:57:18 +0000
asID:                     19766
IP address blocks:        66.51.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:9f:6f:b1:15:01:19:c7:23:35:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
        Validity
            Not Before: Jun 22 12:57:18 2026 GMT
            Not After : Sep 20 12:57:18 2026 GMT
        Subject: CN=44af5de3-e7d3-4375-8c9b-da73251f1f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:c8:dd:d5:db:42:d0:0f:72:2f:ae:3c:1b:
                    25:9a:bd:62:c1:98:cd:47:48:47:ff:90:1c:26:02:
                    26:eb:04:8e:eb:c8:97:31:44:e1:54:31:cf:2b:35:
                    ec:19:a3:89:62:78:80:99:e6:f3:1b:bd:12:e2:d2:
                    ae:81:1b:06:fa:be:a7:a9:52:ed:15:f6:a6:45:a7:
                    16:91:eb:14:39:bd:4e:a2:a6:1a:a1:75:e7:0a:7e:
                    ca:68:0e:c6:51:64:43:b4:99:5a:f4:2b:de:08:69:
                    87:b8:7c:e1:a4:14:7e:6a:a3:10:e1:75:4d:f5:b6:
                    f0:2a:c9:00:5f:64:4a:f4:61:0c:88:c4:5d:0b:0c:
                    c1:8a:e0:1d:3c:62:96:fe:4c:96:8f:87:f4:19:f0:
                    78:93:e3:cd:2a:bf:37:d8:df:ae:48:ea:f3:bb:98:
                    8e:08:89:46:3e:fc:fc:e1:48:ea:ff:9a:9f:6b:20:
                    28:a4:5c:17:cd:ad:1a:56:ba:68:ca:82:db:a0:6b:
                    c3:88:59:37:b9:46:cf:dd:fb:ef:b1:2d:54:2f:67:
                    7f:ca:ff:51:9c:24:bd:39:f0:ac:b3:63:66:86:bd:
                    aa:b9:f8:ea:df:e5:04:46:0b:28:49:71:50:82:aa:
                    f7:7d:42:6e:78:5f:f5:5b:0a:2e:24:56:5d:df:a5:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:DF:A7:10:65:8F:98:33:3A:0E:56:E9:DC:BA:0C:E8:3D:52:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/01340135-323a-36aa-b2a6-c043c7b6b46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl

            X509v3 Authority Key Identifier:
                keyid:4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:20:18:de:54:61:7d:1b:c8:d9:09:1d:8b:6d:d1:fb:c0:8f:
         07:77:8d:07:ba:e7:49:84:a9:5a:5d:df:f6:b0:ea:d5:9b:9c:
         29:9b:3a:21:74:b8:58:a2:e7:17:25:9f:e4:dc:78:95:2e:43:
         48:b8:9f:1a:5c:10:86:07:63:e0:a0:bd:00:14:6a:07:73:e4:
         ab:03:2f:91:6a:3f:23:d3:eb:5e:43:b4:b7:0f:62:9a:d6:cd:
         58:04:b8:25:46:05:53:c2:14:29:be:c0:5b:4e:e4:e8:dc:fb:
         eb:0a:9d:37:2f:0d:22:fe:4e:86:a0:c0:8e:c7:09:98:ce:70:
         0c:31:ab:51:de:99:f7:01:8f:ea:09:bd:b9:2a:8c:6b:76:4e:
         99:2f:62:83:e9:60:76:f2:f7:bb:12:3f:25:46:c5:fe:1b:4c:
         21:e4:4f:04:20:c3:a2:89:54:bf:4e:98:ff:be:be:b6:ab:06:
         d4:4b:a8:cb:41:94:bc:e0:71:36:fc:02:42:72:56:24:1b:ce:
         53:1a:64:91:2f:81:44:68:30:af:05:2a:55:c8:25:88:e1:58:
         6b:8a:03:d0:9a:1a:12:85:d3:7b:86:cb:7d:6b:6d:b9:fa:f2:
         5f:02:24:f8:a8:d4:db:64:29:07:c7:7c:5b:21:f3:e9:e9:d6:
         2b:ae:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:00 2026 by rpki-client